Skip to main content

Cloud-delivered Case ManagerCase Manager Documentation

The Workbench

View all Incident Responder actions and playbooks you've run on a Case Manager incident and their outputs, and run more actions and playbooks at an incident's workbench.

To navigate to an incident's workbench, navigate to CASE MANAGER, select an incident to view its details, then click the View Workbench button.

View all Incident Responder actions and playbooks you ran on the incident and what the outputs are. The number on each action or playbook indicates how many input parameters it processed. To view the output for an input, select the menu.

The workbench of an incident displaying the results of the Get Geolocation – IP-API action.

To manually run a single action or playbook, select RUN ACTION or RUN PLAYBOOK. If you have a Fusion license, you can only run turnkey playbooks and out-of-the-box actions. To create and run custom playbooks and actions, you must have an Incident Responder add-on. To learn more, contact your Exabeam account representative or open a case on the Exabeam Community.

To clear the playbook and action results, select RESET CARDS.